$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft File: gTpuT37cWLx6SLbR_XwZ39go8fE.mft (raw, json) Hash identifier: Su1S+U8wcfdhoFGc6vV2oOkUJ7vpjnExZSHcV8TYl2w= Subject key identifier: 0F:16:4B:A4:58:CC:75:0D:B7:8C:43:EE:53:B6:DC:13:25:D2:B1:08 Authority key identifier: 81:3A:6E:4F:7E:DC:58:BC:7A:48:B6:D1:FD:7C:19:DF:D8:28:F1:F1 Certificate issuer: /CN=A91E0CF5/serialNumber=813A6E4F7EDC58BC7A48B6D1FD7C19DFD828F1F1 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft Manifest number: 97 Signing time: Tue 13 May 2025 05:32:00 +0000 Manifest this update: Tue 13 May 2025 05:31:59 +0000 Manifest next update: Tue 20 May 2025 05:31:59 +0000 Files and hashes: 1: gTpuT37cWLx6SLbR_XwZ39go8fE.crl (hash: K01EU65jI6G7CS3zMjGu328gKoDjwHYcMRcXOx4knw4=) 2: C0F3F504492B11EF8EF0D04FC4F9AE02.roa (hash: 9XdOr8ci0XxQ25MZorUAalomR3Uhklj1yk5ZzWVz3NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.crl rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CF5, serialNumber=813A6E4F7EDC58BC7A48B6D1FD7C19DFD828F1F1 Validity Not Before: May 13 05:31:59 2025 GMT Not After : May 20 05:31:59 2025 GMT Subject: CN=6822d950-8bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ff:54:e5:59:68:30:d0:0f:72:87:e1:a2:e9: b6:33:97:6a:68:87:5a:62:38:55:ff:71:46:55:ee: b6:de:38:97:86:8a:d0:b2:3f:a5:3a:75:81:25:a7: 6a:b9:60:c0:d4:a9:be:e0:60:b2:1c:1b:e5:92:47: 72:ab:3e:74:ab:6b:5a:87:11:a4:43:e7:93:61:a5: 59:e7:32:55:af:eb:94:b4:53:62:6c:85:52:d7:70: a5:bd:0e:e3:d3:09:1d:89:1f:ca:13:6a:c9:ea:a1: 91:97:fe:14:a3:8c:5f:ab:13:1f:53:b6:9d:41:d4: e6:60:0f:a7:5a:fe:fa:c9:0c:9d:71:b8:be:4a:21: b1:96:b5:ae:f0:fe:06:34:5b:3a:7f:5a:ad:60:f8: 3c:0d:77:75:91:54:04:55:ee:3e:8c:e7:00:0e:65: d6:07:13:ce:92:0c:94:c8:a6:f7:a4:e5:13:e1:3f: a7:98:89:29:71:2d:15:6b:42:91:94:3b:99:74:21: e0:c8:e4:bd:10:d2:ce:93:fe:fc:fa:33:a1:3b:75: 38:ea:d4:f2:b8:f7:d9:f9:91:92:c7:6f:00:2f:3f: 5e:10:7f:f6:36:b8:37:8a:44:2d:cf:54:3e:62:87: bc:de:3e:03:07:e2:74:56:43:36:05:22:8d:46:83: 02:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:16:4B:A4:58:CC:75:0D:B7:8C:43:EE:53:B6:DC:13:25:D2:B1:08 X509v3 Authority Key Identifier: keyid:81:3A:6E:4F:7E:DC:58:BC:7A:48:B6:D1:FD:7C:19:DF:D8:28:F1:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:5a:ed:b7:de:6c:5e:a8:ae:bd:f0:08:f3:ef:24:89:d9:83: d7:6d:85:60:cf:95:fb:d3:b4:0f:d6:bd:5a:ac:2f:4e:de:97: f8:57:e2:89:ef:bb:9d:ae:e0:7a:eb:43:25:3a:08:82:59:1f: a6:9a:b4:fd:da:61:96:dc:3e:40:7f:e1:3d:8d:2f:64:8f:00: 06:ee:6f:22:14:02:38:50:c1:59:76:62:96:d5:75:fe:1f:c6: af:50:ef:b6:ec:e7:5c:ab:39:90:bd:e5:55:39:68:c4:90:7c: 7b:a5:60:f0:69:37:7b:ba:ff:5f:2a:d0:86:59:23:b4:b2:65: 89:22:b0:54:a7:48:7f:58:4b:c4:89:6f:f8:8d:61:3e:0d:2e: 42:75:11:0f:fd:ae:c3:d5:f8:b0:24:53:7b:f6:04:75:8a:47: 05:13:1f:5c:d5:9e:d2:11:d0:e3:0f:45:b8:26:4d:e1:07:84: 08:3c:50:a3:da:f2:eb:ca:cd:cf:70:11:bb:49:11:c0:ee:02: 12:76:56:87:43:c4:8d:7d:a6:51:6c:94:be:3a:81:4e:69:6e: 10:1c:52:33:8d:81:e4:9c:40:86:b5:5a:dd:a8:66:45:3b:6d: 42:68:03:2a:6a:32:33:88:5a:e7:0f:fb:dd:9b:90:af:1e:9c: 28:65:b9:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDRjUxMTAvBgNVBAUTKDgxM0E2RTRGN0VEQzU4QkM3QTQ4QjZEMUZEN0MxOURG RDgyOEYxRjEwHhcNMjUwNTEzMDUzMTU5WhcNMjUwNTIwMDUzMTU5WjAYMRYwFAYD VQQDEw02ODIyZDk1MC04YmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/9U5VloMNAPcofhoum2M5dqaIdaYjhV/3FGVe623jiXhorQsj+lOnWBJadq uWDA1Km+4GCyHBvlkkdyqz50q2tahxGkQ+eTYaVZ5zJVr+uUtFNibIVS13ClvQ7j 0wkdiR/KE2rJ6qGRl/4Uo4xfqxMfU7adQdTmYA+nWv76yQydcbi+SiGxlrWu8P4G NFs6f1qtYPg8DXd1kVQEVe4+jOcADmXWBxPOkgyUyKb3pOUT4T+nmIkpcS0Va0KR lDuZdCHgyOS9ENLOk/78+jOhO3U46tTyuPfZ+ZGSx28ALz9eEH/2Nrg3ikQtz1Q+ Yoe83j4DB+J0VkM2BSKNRoMCbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8WS6RY zHUNt4xD7lO23BMl0rEIMB8GA1UdIwQYMBaAFIE6bk9+3Fi8eki20f18Gd/YKPHx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENGNS80QkI3QzY0NDQ5 MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi9nVHB1VDM3Y1dMeDZTTGJSX1h3WjM5Z284 ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2dUcHVUMzdjV0x4NlNMYlJfWHdaMzlnbzhmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENGNS80QkI3QzY0NDQ5MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi9nVHB1VDM3Y1dM eDZTTGJSX1h3WjM5Z284ZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/Wu233mxeqK698Ajz7ySJ2YPXbYVgz5X707QP1r1arC9O3pf4V+KJ 77udruB660MlOgiCWR+mmrT92mGW3D5Af+E9jS9kjwAG7m8iFAI4UMFZdmKW1XX+ H8avUO+27OdcqzmQveVVOWjEkHx7pWDwaTd7uv9fKtCGWSO0smWJIrBUp0h/WEvE iW/4jWE+DS5CdREP/a7D1fiwJFN79gR1ikcFEx9c1Z7SEdDjD0W4Jk3hB4QIPFCj 2vLrys3PcBG7SRHA7gISdlaHQ8SNfaZRbJS+OoFOaW4QHFIzjYHknECGtVrdqGZF O21CaAMqajIziFrnD/vdm5CvHpwoZbkI -----END CERTIFICATE-----Generated at Wed May 14 13:42:33 2025 by rpki-client